CVE-2017-1001001

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges.

Score

CVSS 3.0 5.4 Medium

Status

Modified - 46fe6300-5254-4a98-9594-a9567bec8179

Published

2017-11-01

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Pluxml (Pluxml)

References

• https://github.com/pluxml/PluXml/issues/253